Shrinking the IAM Attack Surface with IVIP
Enterprise Identity and Access Management (IAM) is facing a fragmentation crisis. With identities spread across thousands of applications, machine accounts, and autonomous systems, nearly 46% […]
Month: April 2026
Claude Mythos: AI That Finds Thousands of Zero-Days
Anthropic has unveiled Project Glasswing, a cybersecurity initiative powered by its new frontier model Claude Mythos, designed to autonomously discover and patch vulnerabilities across critical […]
OpenSSL April 2026 Update Fixes RSA KEM Data Leakage
OpenSSL has released a broad April 2026 security update addressing seven vulnerabilities across supported branches, with the most critical being CVE-2026-31790 — a flaw in […]
50,000 WordPress Sites Exposed to Ninja Forms RCE
A critical vulnerability in the Ninja Forms – File Upload plugin has left approximately 50,000 WordPress websites exposed to unauthenticated arbitrary file upload attacks, potentially […]
Storm-1175: Zero-Day Exploits Fuel Medusa Ransomware Surge
Microsoft Threat Intelligence has linked China-based threat actor Storm-1175 to a wave of high-velocity ransomware attacks that weaponize both zero-day and N-day vulnerabilities. The group […]
Microsoft Deprecates Support and Recovery Assistant (SaRA)
Microsoft has officially removed the Support and Recovery Assistant (SaRA) command-line utility from all in-support versions of Windows updates as of March 10, 2026. SaRA […]
Microsoft Resolves Classic Outlook Email Delivery Bug
Microsoft has fixed a server-side issue that was preventing some Classic Outlook users from successfully sending emails via Outlook.com. The bug, first acknowledged last week, […]
GPUBreach: Rowhammer on GPUs Breaks Into Root
Researchers at the University of Toronto have unveiled a new attack called GPUBreach, showing how Rowhammer-induced bit flips in GDDR6 GPU memory can escalate privileges […]
AWS Bahrain Hit Again: Iran’s Targeted Strikes Escalate Cloud Security Risks
Amazon Web Services (AWS) has reportedly suffered its second physical strike in Bahrain within a month, as Iran’s Islamic Revolutionary Guard Corps (IRGC) continues its […]
Beyond Encryption: The Rise of Multi-Extortion Ransomware
Ransomware has evolved from a disruptive nuisance into a strategic weapon with devastating real-world consequences. Once limited to encrypting files and demanding payment for decryption […]